Web Builder — Web 构建器
v1.0.0Web 应用构建器工具。
0· 280·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill's files and runtime instructions are coherent with its stated purpose (scaffolding a React + Node/Mongo app); it only writes local scaffold files and does not request secrets, install external packages at install time, or phone home, though a couple of minor issues deserve attention.
评估建议
This skill appears to do what it says: it scaffolds a local React + Node + Mongo app. Before running: 1) confirm the correct script path in your environment (SKILL.md path differs from the package path), 2) run the script from a safe working directory to avoid overwriting important files (it creates apps/<project-name> by default), 3) review and replace insecure defaults in the generated .env (especially JWT_SECRET and DB URI) before running the app in production, and 4) inspect the generated pa...详细分析 ▾
✓ 用途与能力
Name/description (Neo App Mode / build full-stack apps) match the included assets: SKILL.md collects requirements and the shell script scaffolds a frontend and backend with the described stack and structure. The requested files and generated package.json values are proportionate to a scaffolding task.
ℹ 指令范围
Instructions direct the agent to run a local shell script to create project files and to collect requirements first — appropriate. Minor problems: SKILL.md calls the script at 'skills/neo-app-mode/scripts/scaffold_neo_app.sh' but the provided script path in the package is 'scripts/scaffold_neo_app.sh' (path mismatch). Also the generated .env.example contains a weak default JWT_SECRET ('change_me') which is a security/usability note for users of the scaffolded app.
✓ 安装机制
No install spec; this is an instruction-only skill that includes a local scaffolding script. Nothing is downloaded or written outside the scaffold target directory by the script itself.
✓ 凭证需求
The skill does not require environment variables or credentials to run. The generated application relies on runtime env vars (MONGODB_URI, JWT_SECRET) and includes .env.example with defaults — those are expected for a scaffold but you should replace defaults (notably JWT_SECRET) before deploying.
✓ 持久化与权限
always is false and the skill does not request persistent or elevated privileges. The script writes files only under the specified apps/<name> path; it does not modify other skills or system configuration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/6
Build full-stack applications after collecting project requirements. Use when user says Neo App Mode, asks to build/create/scaffold a new app, or wants React+Vite+Tailwind frontend with Node/Express/MongoDB backend using MVC architecture.
● 无害
安装命令 点击复制
官方npx clawhub@latest install webappbuilder
镜像加速npx clawhub@latest install webappbuilder --registry https://cn.clawhub-mirror.com
技能文档
Collect requirements first, then scaffold a production-ready starter.
Requirement intake (ask 之前 scaffolding)
Ask these in one compact checklist:
- Project name
- App 类型 和 core modules (auth, dashboard, CRUD entities)
- 用户 roles (管理员/用户/etc.)
- 必填 pages 和 API endpoints
- MongoDB 连接 preference (local/Atlas)
- Auth 方法 (JWT/会话/OAuth)
- Extra features (file 上传, charts, payments, notifications)
If user is unsure, use defaults from references/default-requirements.md.
Generate app scaffold
Run:
bash skills/neo-app-mode/scripts/scaffold_neo_app.sh \
--name \
--path apps \
--with-auth jwt
Output structure:
frontend/→ React + Vite + Tailwindbackend/→ Express + MongoDB + MVC.env.示例files 对于 frontend/backend- starter README 带有 run steps
Behavior rules
- Always confirm requirements summary 之前 code generation.
- 使用 clean MVC 在...中 backend:
models/,controllers/,routes/,middlewares/,配置/. - 添加 在 最少 one sample entity 模块 带有 满 CRUD.
- 添加 health 路由 和 API prefix
/api/v1. - Keep generated code minimal, readable, 和 extendable.
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制